Wednesday 4 November
Global

Your region, kept on this device.

Ubuntu notice covers two libuser flaws enabling local denial of service and possible privilege escalation

Severity
Medium
Exploited
Yes
Sources
1

Two weaknesses were found in libuser, a tool that manages user account information on Linux. A person with access to the computer could use them to corrupt a key system file, which could crash the system or possibly give them higher privileges.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Install the libuser package update referenced in Ubuntu security notice USN-8987-1.
  2. Restrict local account access on multi-user systems until the update is applied.

Written by AI from the sources, checked against them

Vulnerabilities

Full story timeline · 2 updates

  1. Wed 26 AugustCVE-2015-3246 added to CISA’s exploited listCISA KEV
  2. Tue 3 NovemberUSN-8987-1: libuser vulnerabilitiesUbuntu Security Notices

Who reported · 1 outlet

Ubuntu Security Notices

Who and what is in it

Products

Report a problem